CVE-2026-70440

The Jenkins Qualys Container Scanning Connector Plugin (version 1.8.0.5 and earlier ) is vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is the failure to escape user-controlled field values within a JavaScript context . Attackers possessing Item/Configure permissi...